Framework-owned domain
LGF can provide a Samba AD authority for host authentication, Windows joins, DNS, and domain-aware access control. The Domain page reports the domain, Kerberos realm, provisioning state, internal health, DNS mode, listener mode, LAN Domain Services state, break-glass availability, and normal host login authority.
Use the status fields together when diagnosing a problem. A healthy domain should be provisioned, internally healthy, and have LAN Domain Services enabled when clients need to join or use RSAT. A single slow or incomplete status read should not be treated as a domain failure.
Domain setup modes
The setup wizard supports creating a new internal-only domain, joining an existing domain and promoting the host to a DC, and joining an existing domain as a member. For an existing domain, provide the administrator credentials and the AD DNS domain. When the default DNS cannot locate a domain controller, provide the DC IP address as well.
LAN Domain Services
LAN Domain Services controls whether the Samba authority is reachable by domain clients, domain joins, RSAT, and LAN DNS. Internal-only mode keeps the directory and local login path available on the host without exposing those services to the network.